Hi Andreas,

On Sun, Feb 21, 2010 at 8:27 PM, Andreas Schaefer <[email protected]> wrote:
> The Blog works perfectly for me but I had to take two more steps to make it 
> work with the security:...
>
> 1) Check off 'Login Form' in 'Apache Sling Authorization Header Authenticator'
>
> 2) Check off 'Access auth resources anonymously' in 'Apache Sling OpenID 
> Authenticator'
>
> I am not an expert when it comes to security especially not in Sling but that 
> is what I had to do in order
> to make the 46-line blog work and using WebDav to do that....

Ah, got it now, what didn't work for you is the WebDAV connection to
Sling, after setting "Allow Anonymous Access" to false.

As a workaround, you can use curl to upload the tests scripts, see below.

But there's a bug here, the OPTIONS request used by the WebDAV client
receives a login form instead of a 401 when "Allow Anonymous Access"
is false. I'll have a look.

-Bertrand


How to upload the blog.esp script using curl:
curl -X MKCOL http://admin:ad...@localhost:8888/apps/blog
curl -T blog.esp http://admin:ad...@localhost:8888/apps/blog/blog.esp

Reply via email to